Win 2000/XP blue Screen Solution practical skills _windowsxp

Although Windows 2000/XP system stability has been greatly enhanced based on NT architecture, even Windows XP is known as "never crashes," but we still see the blue alert information shown in Figure 1, which is what is usually called "blue screen".

The reason why Windows 2000/xp blue alert

Windows 2000/XP has a hierarchical structure, with two layers known as mode, user mode and kernel mode (Kernel mode), where applications cannot directly access hardware devices, and can only be accessed directly with the help of a driver.

However, even if the NT architecture is stabilized, due to some reasons, such as hardware conflicts, hardware problems, registry errors, low virtual memory, loss of dynamic link library files, exhaustion of resources, and so on, this can cause drivers or applications to be wrong, or even to the kernel layer. In this case, Windows aborts the system and starts the feature named Kebugcheck, which, when checked for all interrupted processing processes and compared to the preset stop code and parameters, turns blue and displays the appropriate error messages and fault prompts. Because this phenomenon actually means a panic, it is often referred to as "Blue screen of Death" (BSOD), also known as "Stop Information" or "Stop information."

　　 Ii. Understanding hidden information in blue alerts

Windows 2000/xp's BSOD window is significantly different from Windows NT4 's previous Bosd window, with the biggest difference being that the NT BSOD window includes only one generic Stop message code, but Windows 2000/ XP's BSOD includes two types of stop and hardware messages, which are error messages when a software error that cannot be recovered is found, which is the error message that occurs when a serious hardware error is found.

Although the information in Figure 1 Windows looks complex, it is generally composed of three parts:

　　 1. Error message

In the "* * * Stop:" to "Wdmaud.sys" between the content is called the error message, by the error code, custom parameters, error symbols, such as three parts, the meaning of each part is as follows:

Error code: 16 digits after the stop;

Custom parameters: The composition of the error code characters, defined by the program personnel, the general user is difficult to understand;

Error symbol: KMODE_EXCEPTION_NOT_HANDLED

After the error symbol, there is also a memory location and file name that shows you the memory location and source file when the error occurred. The most useful thing for us is the previous error code information that will be used when searching the Microsoft Knowledge Base.

　　2. Recommended actions

This shows the actions and steps that the system recommends to the user, such as uninstalling the program in Safe mode, rolling back the driver, updating the BIOS, installing patches, and so on, but most of the time the system needs to be restarted before any further action can be considered.

　　3. Debug port Information　

This will show you how to set the kernel debugger information, including whether the memory dump image has been written to the Magneto Rex ⑹ gown finish burn 獯 wei smile bath!?

In fact, according to the author's experience, the blue alarm in addition to the error code more useful, for ordinary users, the rest of the majority of information does not have much practical significance, only for reference.

To debug your system, Windows Kebugcheck automatically generate a debug file named Memory.dmp, which is located under the C:windowsminidump folder, by default, after a bsop error occurs on the system. The size of the file is the same as the physical memory of the system, we can compress the file and send it to Microsoft's technical support to obtain the corresponding solution, but the capacity of the file is so large, how to send is a big problem, so few users really do this.

Tip: Open the system properties → advanced → startup and recovery window. As shown in Figure 2, here you can see how write debug information is generated: a small memory dump, a core memory dump, a full memory dump, none, based on the analysis above, it is recommended to choose none here.

　　iii. handling of the Blue Alert trilogy

Although the Windows 2000/XP Blue Alert window displays information that may be different, either for hardware reasons, or for driver-system compatibility issues, or simply for some bugs in the application. First of all, of course, the reason for the virus elimination, and then we can follow the following steps to deal with:

　　Step 1th: Reboot the system

When the Blue Alert window appears, the first thing we should consider is restarting the system, which will solve the problem in most cases after restarting the system. However, generally at this time has been unable to "Ctrl+alt+del" hot start, and can only press the reset button cold start, or simply power off after the power-on.

When you enter the system, from the control panel → admin tools → event viewer, or type the "eventvwr.msc" command into the Event Viewer interface in the Start → run box, as shown in Figure 3, where you can focus on the date and time to check for events in system and application that have a type flag of "error" , such as Figure 4, to report a service startup failure error.

　　Step 2nd: Revert to the last Known Good Configuration

Windows 2000/XP Blue alerts are not for no reason, the NT architecture of the operating system will not be angry, generally due to the updating of device drivers or the installation of some software caused, and sometimes even the user to optimize the system or delete some important system files caused by, You can restart the system and quickly press F8 to select Last Known Good Configuration, which restores valid registry information for the Hkey_local_machinesystemcurrentcontrolset entry in the registry. However, the error caused by a corrupted driver or file cannot be resolved.

Alternatively, you may try pressing the F8 key to select boot to Safe mode, and if you are able to enter Safe mode correctly, it may be a problem with the driver or system service.

Step 3rd: Query error code

Note the English information in Figure 1 window, especially the "0x0000001E" error code, and then access the http://from another computer support.microsoft.com site, in the upper-left corner of the search (Knowledge Base) box type "Stop * * *", where the "* * *" indicates the error code, for the convenience of reading, of course, generally choose the "Chinese Knowledge base", but many times we can only be in the "English Knowledge Base"　　 To find the answer, or you can search on Google or Baidu.

If the above steps still do not solve the problem, perhaps we should consider whether it is a hardware issue, Windows XP can access the http://support.microsoft.com/default.aspx?scid=kb; zh-cn;314062 View the Hardware Compatibility List (HCL), Windows 2000 users can access http://winqual.microsoft.com/download/display.asp? Filename=hcl/win2000hcl.txt View the Hardware Compatibility List, and then consider reseating the memory, video card, Nic, or try replacing it with the replacement method, which is more common with memory problems or power problems, if that doesn't work, I'm afraid I can only think of reinstalling the system or formatting the hard drive.